Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/efe06a4c-4419-37e2-bd18-92e76b2b0cb7.roa
File: efe06a4c-4419-37e2-bd18-92e76b2b0cb7.roa (raw, json)
Hash identifier: rE1hm39472ZuWLdguS6GANu4wlkPF+jgJrgiK8WTIN8=
Subject key identifier: 34:B5:44:F7:9E:B5:71:D4:D2:6E:18:1A:E4:29:E8:D9:85:C1:6C:E6
Certificate issuer: /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Certificate serial: 010D0C9F432858489EC61CE27B20DF5E58BD7780
Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/efe06a4c-4419-37e2-bd18-92e76b2b0cb7.roa
Signing time: Tue 21 Jan 2025 17:03:47 +0000
ROA not before: Tue 21 Jan 2025 17:03:47 +0000
ROA not after: Mon 21 Apr 2025 16:03:47 +0000
asID: 7311
IP address blocks: 69.17.224.0/19 maxlen: 24
104.37.80.0/22 maxlen: 24
192.154.144.0/20 maxlen: 24
216.239.64.0/19 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 06:11:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:c6:1c:e2:7b:20:df:5e:58:bd:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Validity
Not Before: Jan 21 17:03:47 2025 GMT
Not After : Apr 21 16:03:47 2025 GMT
Subject: CN=fb7a2c27-81af-4ca7-9942-c4213e485a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:df:6c:b1:bc:5c:74:45:4a:06:a6:36:2d:ae:
e1:12:df:37:82:7f:44:1e:72:6c:84:c4:12:03:c9:
4d:37:cd:a3:d0:64:f7:88:02:3c:a5:1b:d8:b4:17:
69:46:7b:70:f0:b6:f6:5d:54:e2:66:c8:50:5e:88:
06:f9:9b:63:ae:38:31:34:22:37:e4:05:f1:79:37:
c9:71:e0:56:2c:f9:4b:f3:6b:7d:54:ba:c3:dd:9b:
4b:10:37:e0:50:2f:92:cd:98:84:2a:d3:a9:f5:74:
1c:25:4f:44:fe:cc:b8:1f:4c:74:a7:ba:f6:59:79:
78:d1:91:41:6e:fa:e8:cc:28:12:0f:30:4a:c0:69:
cb:95:38:6b:22:90:b8:c6:67:e0:de:5f:43:49:c1:
81:11:af:fb:f2:ee:63:d2:81:dc:7f:28:a2:27:57:
ff:0f:e5:3c:d3:cd:56:05:a9:31:09:69:65:ed:ca:
97:5a:71:91:85:56:ec:89:ea:a4:1f:71:7f:86:78:
51:7e:98:b3:da:17:a0:61:75:e5:ba:ec:79:03:3c:
a0:e6:89:01:7b:76:70:74:ea:08:42:c1:5d:43:f9:
9a:ae:05:57:b5:95:e9:9c:9c:15:91:29:e6:8c:60:
3e:3d:18:a5:49:04:81:de:cf:88:1b:b6:fb:10:78:
c6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B5:44:F7:9E:B5:71:D4:D2:6E:18:1A:E4:29:E8:D9:85:C1:6C:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/efe06a4c-4419-37e2-bd18-92e76b2b0cb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl
X509v3 Authority Key Identifier:
keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
sbgp-ipAddrBlock: critical
IPv4:
69.17.224.0/19
104.37.80.0/22
192.154.144.0/20
216.239.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:99:64:99:12:75:24:91:53:52:2b:b6:15:ae:9b:79:67:16:
1c:bd:e8:60:44:1a:a3:53:11:75:df:f2:77:09:f7:1c:fb:0d:
15:e6:34:0c:71:1b:96:09:b1:b4:7b:93:4f:a9:b5:80:f7:78:
ac:2a:43:f4:84:c5:8d:6c:c6:22:3d:88:5d:6c:d8:5f:5b:09:
f5:b2:42:49:eb:f9:0f:b1:02:63:0c:e6:a0:ca:9b:f4:55:08:
ec:df:85:88:34:57:ce:27:40:89:64:31:b1:69:5a:dd:f3:0e:
f1:a7:12:f8:6f:45:4a:58:bf:41:a2:ab:aa:0f:36:b6:f8:6c:
d0:40:1e:83:24:dd:92:ec:bf:15:29:9f:34:8c:c2:13:c9:b0:
7d:f0:5a:20:ff:05:ea:3c:8c:ad:9a:1d:28:f3:e9:08:88:7e:
ae:cf:6d:f4:56:28:1f:27:72:c0:6f:d5:c2:fa:a2:d9:e9:30:
26:90:f3:8f:cf:96:e3:16:2b:a3:38:9a:47:66:fc:2f:1e:7d:
bc:89:12:74:91:ae:3b:ee:c8:86:6d:67:d5:5a:73:a5:75:0c:
75:ac:3b:d5:67:eb:25:07:9f:eb:3f:0f:63:fc:e2:0d:7e:ca:
58:52:15:8b:cd:5c:cc:1e:64:82:1d:d3:3d:18:1f:ce:c8:4a:
95:a6:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:29:40 2025 by rpki-client